setup-user-seat
===============

Configuration files related to device to user seat attachment.

setup-user-seat-cdrom-strict
----------------------------

Configuration files to strict user access to /dev/cdrom. Includes
PolicyKit rules checking 'cdrom' group + files, disabling attachement
of /dev/cdrom (and related devices) to the user seat.

The package contains three following configuration files:

1. /etc/security/console.perms.d/60-skip-cdrom.perms
2. /usr/lib/udev/rules.d/71-0-uaccess-skip-cdrom.rules
3. /usr/share/polkit-1/rules.d/09-udisks2-check-cdrom.rules

With that files installed, `/dev/cdrom` and related files (such as
`/dev/sr0`) are not attached to the user seat: i. e. no change of
ownership (via `pam_console.so`) and ACL (by `systemd-logind`)
should happen. Additionally, the packaged PolicyKit (`polkit`) rule
require that in order to mount R/O optical media the user has to
be a member of `cdrom` or `cdwriter` group, and in order to mount
R/W optical media the user has to be in `cdwriter` group.
